IntrusionDetectionEnabled Property of the IFPCAttackDetection Interface

Article
08/13/2010

The IntrusionDetectionEnabled property gets or sets a Boolean value that indicates whether intrusion detection is enabled.

C++

HRESULT put_IntrusionDetectionEnabled(
    VARIANT_BOOL fIntrusionDetectionEnabled
);
HRESULT get_IntrusionDetectionEnabled(
    VARIANT_BOOL* pfIntrusionDetectionEnabled
);

Parameters

fIntrusionDetectionEnabled
Boolean value that indicates whether intrusion detection is enabled.
pfIntrusionDetectionEnabled
Pointer to a Boolean variable that is set on return to VARIANT_TRUE if intrusion detection is enabled or to VARIANT_FALSE if intrusion detection is disabled.

Return Value

These property methods return S_OK if the call is successful; otherwise, they return an error code.

Visual Basic

Property IntrusionDetectionEnabled As Boolean

Property Value

Boolean value that indicates whether intrusion detection is enabled.

Remarks

This property is read/write. Its value is set to True (VARIANT_TRUE in C++) during Forefront TMG setup.

If intrusion detection is enabled, Forefront TMG can be configured to generate events for the following types of attacks:

All-port scan attack.
Well-known port scan attack.
IP half-scan attack.
Land attack.
Ping-of-death attack.
UDP bomb attack.
Windows out-of-band (WinNuke) attack.

Requirements

Client	Requires Windows 7 or Windows Vista.
Server	Requires Windows Server 2008 R2 or Windows Server 2008 x64 Edition with SP2.
Version	Requires Forefront Threat Management Gateway (TMG) 2010.
IDL	Declared in Msfpccom.idl.
DLL	Requires Msfpccom.dll.

Share via